Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Palo Alto Networks
Exam Format
90 min
Multiple choice questions
Not publicly disclosed
Specialist
Registration
$250 USD
Pearson VUE
English
Validity
2 years
Pass the current version of the Network Security Analyst exam; Earn a higher-level certification in the Network Security track; Complete continuing education requirements
PCCNSA Exam Topics and Domains
PCCNSA is organized into 4 weighted domains. Expect to work with Strata Cloud Manager, Next-Generation Firewall, PAN-OS, SD-WAN, and more.
1
Object Configuration Creation and Application
30%
Security Profiles and Security Profile Groups
Create and apply security profilesCreate and apply security profile groups
- Understand how to create and configure security profiles
- Apply security profiles to security policies
- Create and manage security profile groups
Decryption Profiles
Create and apply decryption profiles
- Configure decryption profiles for SSL/TLS inspection
- Apply decryption profiles to decryption policies
External Dynamic Lists
Create and apply external dynamic lists
- Create external dynamic lists from various sources
- Apply EDLs to security and decryption policies
Custom Objects
Create custom URL categoriesCreate custom signaturesCreate custom data patterns
- Create custom objects including URL categories, signatures, and data patterns
- Apply custom objects to appropriate security policies
Log Forwarding Profiles
Create and apply log forwarding profiles
- Configure log forwarding profiles for different log types
- Integrate with Strata Logging Service and external SIEM systems
Data Security Profiles
Create and apply data security profiles
- Configure data security profiles to prevent data leakage
- Apply data patterns and file blocking rules
IoT Security Profiles
Create and apply IoT security profiles
- Configure IoT security profiles
- Apply IoT security policies to protect IoT devices
DoS Protection Profiles
Create and apply DoS protection profiles
- Configure DoS protection profiles
- Apply DoS protection to security zones and policies
SD-WAN Profiles and Templates
Create and apply SD-WAN profilesCreate and apply SD-WAN templates
- Configure SD-WAN profiles and templates
- Apply SD-WAN configurations across multiple devices
2
Policy Creation and Application
30%
Security Policies
Create and apply security policies with App-IDCreate and apply security policies with User-IDCreate and apply security policies with Content-ID
- Create security policies using App-ID, User-ID, and Content-ID
- Apply appropriate security profiles to policies
- Understand policy evaluation order and best practices
Decryption Policies
Create and apply decryption policies
- Configure decryption policies for SSL/TLS traffic inspection
- Implement decryption exemptions for sensitive traffic
Application Override Policies
Create and apply application override policies
- Configure application override policies for custom applications
- Understand when application override is necessary
Policy-Based Forwarding (PBF) Policies
Create and apply PBF policies
- Configure PBF policies for advanced traffic routing
- Understand PBF use cases and scenarios
SD-WAN Routing and SLA Policies
Create and apply SD-WAN routing policiesCreate and apply SLA policies
- Configure SD-WAN routing policies for optimal path selection
- Create SLA policies to ensure application performance
3
Management and Operations
26%
Centralized Management System
Strata Cloud Manager (SCM)Folders and snippetsAutomations and variablesStrata Logging Service
- Navigate and use Strata Cloud Manager for centralized management
- Configure folders, snippets, and automations
- Utilize Strata Logging Service for log management
Security Posture Improvement
Command CenterActivity InsightsPolicy Optimizer
- Use Command Center, Activity Insights, and Policy Optimizer to improve security posture
- Implement security recommendations and optimize policies
Incident Remediation
Log ViewerIncidents and Alerts page
- Use Log Viewer and Incidents/Alerts page to investigate and remediate security incidents
- Perform effective log analysis for incident response
4
Troubleshooting
14%
Configuration Troubleshooting
Troubleshoot misconfigurations
- Identify and resolve common configuration errors
- Understand differences between on-box and cloud management troubleshooting
Runtime and Commit/Push Errors
Troubleshoot runtime errorsTroubleshoot commit and push errors
- Diagnose and resolve runtime errors
- Troubleshoot commit and push failures in Strata Cloud Manager
Device Usage and Health
Troubleshoot device usage and health
- Monitor and troubleshoot device resource usage
- Identify and resolve device health issues
How do I earn this certification?
Passing PCCNSA earns the Palo Alto Networks Certified Network Security Analyst certification. It sits in the Network Security track.
Current Level Exams
- PCCNSA - Network Security Analyst
- PCNSE - Next-Generation Firewall Engineer
- PCSAE - SD-WAN Engineer
- PCSFE - Security Service Edge Engineer
Next Level Options
PCCNSA-ARCH - Network Security Architect Advanced architectural design and Zero Trust implementation
Alternative Paths
- PCNSE - Next-Generation Firewall EngineerDeeper expertise in PAN-OS and NGFW deployment
- PCSAE - SD-WAN EngineerSD-WAN deployment and management specialization
- PCSFE - Security Service Edge Engineer SASE and SSE deployment expertise
- PCCSE-XA - XSIAM AnalystTransition to Security Operations Center (SOC) analyst role
- PCCSE-XDR - XDR AnalystExtended detection and response specialization
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for PCCNSA.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2025-08-01
- Announcement date: 2025-03-01
Updates
- Strata Cloud Manager Latest Central platform for Network Security Analyst exam • Release date: 2025-03-31
- Strata Logging Service Latest Cloud-based logging integration covered in exam • Release date: 2025-01-01
- PAN-OS 11.x Latest firewall OS features and capabilities • Release date: 2024-11-01
Who should take this exam?
- Hands-on experience with Palo Alto Networks technologies
- Basic understanding of network security concepts
- Familiarity with firewall administration
- Experience with Strata Cloud Manager or Panorama